import-codescan

Import Code Scanning alerts and create remediation task skeletons.

84|5|Updated Mar 6, 2026

Search Tags:#automation #remediation #task-management #codeql #security-alerts #codescan

Ready to run

npx skills add https://github.com/fitlab-ai/agent-infra --skill import-codescan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: import-codescan
Source: https://github.com/fitlab-ai/agent-infra/tree/main/.agents/skills/import-codescan
Command: npx skills add https://github.com/fitlab-ai/agent-infra --skill import-codescan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

导入 Code Scanning（CodeQL）告警并创建修复任务的工作流自动化，简化告警到任务的桥接过程。

Core Features & Use Cases

解析告警元数据（编号、状态、规则、工具、位置等），并据此创建可跟踪的修复任务骨架。
保证任务在创建后进入正确的工作流步骤，并要求人工干预而非直接修改代码或提交变更。
使用场景包括：当新告警到达时自动生成一个待办任务并记录相关上下文，方便后续分析与修复。

Quick Start

将 Code Scanning 告警导入并创建相应的修复任务。

Frequently Asked Questions about import-codescan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I import Code Scanning alerts to create remediation tasks?▼

This skill imports Code Scanning alerts by parsing metadata such as alert numbers, status, rules, and locations to generate structured remediation task skeletons for security incident triage workflows.

What is the process for turning CodeQL security alerts into task skeletons?▼

Turning CodeQL security alerts into task skeletons involves ingesting alerts, parsing metadata, and applying workflow rules to produce structured remediation tasks with status tracking and validation.

Does the Code Scanning alert import workflow require manual intervention for code fixes?▼

Yes, the Code Scanning alert import workflow requires manual intervention; it generates remediation task skeletons for tracking and analysis without directly modifying code or submitting changes.

Can I use this to automate security incident triage for CodeQL alerts?▼

Yes, you can automate security incident triage for CodeQL alerts by importing them into structured remediation tasks that capture context and enter the correct workflow steps for validation.

What metadata is parsed when importing Code Scanning alerts for task management?▼

When importing Code Scanning alerts for task management, the skill parses metadata including alert numbers, status, rules, tools, and locations to generate structured remediation task skeletons.

What are the limitations of automating CodeQL alert remediation task creation?▼

The limitation of automating CodeQL alert remediation task creation is that it only generates task skeletons; it requires human intervention for actual code modifications and does not submit changes.